feat: sign pre-built binary with GPG key #1181

	# protobuf runs `make proto-lint` and `make proto-gen`.
	name: protobuf
	on:
	pull_request:
	jobs:
	proto-lint:
	runs-on: ubuntu-latest
	timeout-minutes: 5
	steps:
	- uses: actions/checkout@v4
	- name: proto-lint
	run: make proto-lint
	proto-gen:
	runs-on: ubuntu-latest
	timeout-minutes: 5
	steps:
	- uses: actions/checkout@v4
	- name: "Check protobuf generated code matches committed code"
	# yamllint disable
	run: \|
	set -euo pipefail

	make proto-gen

	if ! git diff --stat --exit-code ; then
	echo ">> ERROR:"
	echo ">>"
	echo ">> Protobuf generated code requires update (either tools or .proto files may have changed)."
	echo ">> Ensure your tools are up-to-date, re-run 'make proto-gen' and update this PR."
	echo ">>"
	exit 1
	fi
	# yamllint enable

	# add this back when we start using versioning
	# breakage:
	# runs-on: ubuntu-latest
	# steps:
	# - uses: actions/checkout@v4
	# - name: check-breakage
	# run: make proto-check-breaking

Provide feedback